Registration Authority and Smartcard Guidance
Community Pharmacy
Document Title
Registration Authority and Smartcard Guidance - Community Pharmacy
Customer:
External
Version:
0.2
Release Date:
October 2015
Authors:
Nathy Connolly (RA Manager)
Document Purpose and Scope:
To outline processes for managing smartcards in Community Pharmacies, and to provide operational guidance to Community Pharmacy Smartcard Sponsors
.
Document History:
Version:
Date:
Summary of Changes:
NA
NA
Next Review Date:
October 2017 (or when North West CSU completes transition)
Approved By:
Melanie Carrol – Local Pharmaceutical Committee
Pam Soo – NHS England
Quality Checked By:
Melanie Carrol – Local Pharmaceutical Committee
Pam Soo – NHS England
Distribution to:
Community Pharmacy Smartcard Sponsors and Published on the LPC Website
Contents:
See overleaf
Contents
1.Purpose4
2.North West Commissioning Support Unit (NWCSU)4
3.Roles and Responsibilities4
3.1.Pharmacy Organisational Sponsor4
3.2.Pharmacy Smartcard Sponsor4
3.3.Pharmacy Smartcard Unlocker5
3.4.Smartcard Users5
3.5.Registration Authority Agent5
4.Processes6
4.1.Smartcard Registration6
4.2.Add/Remove Access Position (users changing store or role within store)7
4.3.Smartcard Unlock or Renewal7
4.4.Lost, Stolen and Damaged Smartcards8
4.5.User Name Change8
4.6.Change of Pharmacy Smartcard Sponsor8
4.7.Change of Pharmacy Smartcard Unlocker9
5.Smartcard Access Levels10
6.Smartcard Systems11
6.1.CIS (Care Identity Service)11
6.2.CIS Technical Support11
7.CIS Guides12
7.1.Security Message12
7.2.How to Unlock a User’s Smartcard13
7.3.How to Re-Issue Smartcard Certificates15
7.4.How to Approve a Smartcard Request in UIM18
7.5 Self-Renewing Your Smartcard Certificates that are About to Expire19
8.Identification Documents23
9.NWCSU Contact Details24
10.NWCSU Offices24
Appendix - Community Pharmacy Smartcard Form25
1. Purpose
This document aims to provide process and operational guidance for Registration Authority and Smartcards.
Audience: Pharmacy Contractors, particularly Pharmacy Smartcard Sponsors
2. North West Commissioning Support Unit (NWCSU)
North West Commissioning Support Unit (NWCSU) is the local NHS body commissioned by NHS England to support smartcards for the Cheshire, Wirral and Warrington footprint.
Important Note: This document covers the Cheshire, Wirral and Warrington area only. The Greater Manchester RA Service is part of North West CSU, but is provided by a separate RA team with different processes. At the time of writing of this document North West CSU is in the process of closing. The two RA services are not expected to merge and are expected to be hosted by different organisations in the future.
NWCSU offers a range of professional services to NHS stakeholders. The Registration Authority Team (smartcard support) sits within the ICT directorate.
3. Roles and Responsibilities
There are a number of roles that contribute to smartcard management.
3.1. Pharmacy Organisational Sponsor
Responsible for nominating and approving Pharmacy Smartcard Sponsors. Typical position:
· Superintendent
· Regional Manager / Company EPS Lead (large chains)
Sole traders would usually act as Organisational Sponsor and Smartcard Sponsor.
Works for: Community Pharmacy Contractor
3.2. Pharmacy Smartcard Sponsor
Responsible for approving requests for smartcard registrations and any changes to a user’s smartcard profile. Typical position:
· Pharmacist Manager
· Area Manager, Business Manager (large chains)
Note: Dispensers and Technicians can only be set up as a smartcard sponsor if they are also the store manager. This would usually apply to larger stores without a suitable lead pharmacist.
Works for: Community Pharmacy Contractor
3.3. Pharmacy Smartcard Unlocker
Responsible for unlocking or renewing smartcards onsite. The unlock function is automatically granted to Agents and Sponsors, but can be granted to other pharmacy shop staff to ensure business continuity.
Works for: Community Pharmacy Contractor
3.4. Smartcard Users
All registered smartcard users are responsible for complying with the NHS Care Records Service Smartcard Terms and Conditions which can be accessed at http://nww.hscic.gov.uk/rasmartcards/docs/ra01a.doc
3.5. Registration Authority Agent
Responsible for delivering support of smartcards in adherence with local and national procedures.
Works for: NHS North West Commissioning Support Unit (NWCSU)
4. Processes
Most processes require the Community Pharmacy Smartcard Form to be submitted to the CSU IT Servicedesk. See appendix A.
4.1. Smartcard Registration
What does this process cover? New applicants who have never been registered with a smartcard in the past.
How do I begin it? Submit the Community Pharmacy Smartcard Form to the CSU IT Servicedesk
How long will it take? We aim to register new users within 5 working days. This will depend on the pharmacy sponsor being available to approve the request, and the applicant being able to visit the NWCSU offices with their identification.
*see appendix 1
**see section 8
4.2. Add/Remove Access Position (users changing store or role within store)
What does this process cover? New starters with a smartcard., leavers, change of role within a store
How do I begin it? Submit the Community Pharmacy Smartcard Form to the CSU IT Servicedesk.
How long will it take? We aim to process change requests within 3 working days. This will depend on the pharmacy sponsor being available to approve the request. If necessary, please indicate that the request is urgent in the subject of your email and we will aim to prioritise it.
*see section 7.4
4.3. Smartcard Unlock or Renewal
What does this process cover? Unlocking locked smartcards, and renewing
How do I begin it? Contact your Pharmacy Unlocker or Pharmacy Sponsor. If unable to help, submit the Community Pharmacy Smartcard Form to the CSU IT Servicedesk
How long will it take? If this can be done onsite then it depends on your store unlocker. If you need to visit our offices we aim to respond within 24 hours and arrange a time to suit you. If you urgently need to visit us for a smartcard unlock, please telephone the CSU IT servicedesk and ask them to notify the RA Team that it is urgent.
Smartcards are unlocked on site by a Pharmacy Sponsor or Unlocker.
If there is no pharmacy unlocker available, then your store should apply for an unlocker to be set up, or the user will make an appointment to have their smartcard unlocked at a NWCSU locality base.
GP Unlockers – Smartcard unlocking is not restricted by organisation. You could set up a reciprocal arrangement with your local GP Practice for smartcard unlocking as they also use smartcards. (DO NOT ASSUME THAT YOUR LOCAL GP WILL BE ABLE TO ASSIT)
4.4. Lost, Stolen and Damaged Smartcards
What does this process cover? Lost, stolen and damaged smartcards for replacement
How do I begin it? Report it to the CSU ICT Servicedesk (IMMEDIATELY) by submitting the Community Pharmacy Smartcard Form.
How long will it take? This will depend on whether we can send the card out locked (see next paragraph). We aim to issues the replacement within 3 working days, which can then be collected from our offices or posted out locked as necessary.
The old smartcard will be cancelled and a replacement will be issued. If there is a Pharmacy Unlocker in place then the replacement smartcard will be sent out locked (Royal Mail Recorded Delivery). Otherwise the user will arrange an appointment at a NWCSU locality office to be issued with a replacement.
4.5. User Name Change
What does this process cover? Smartcard users changing their name.
How do I begin it? Submit the Community Pharmacy Smartcard Form to the CSU IT Servicedesk
How long will it take? We aim to process name changes within 5 working days. This will depend on the user being able to produce their name change certificate.
The user will visit the NWCSU offices with their change of name certificate and a new smartcard will be issued with the new name. In certain circumstances the CSU RA Agent may visit pharmacy premises to check the marriage certificate.
4.6. Change of Pharmacy Smartcard Sponsor
What does this process cover? Changing a pharmacy store’s smartcard sponsor.
How do I begin it? Complete and submit the Community Pharmacy Smartcard Form to the CSU IT Servicedesk
How long will it take? We aim to process sponsor change requests within 3 working days
The NWCSU RA Team will contact the Organisational Sponsor for approval before processing the request. This may delay the process depending upon their availability.
If the new sponsor is not already registered with a smartcard they will need to complete the registration process.
4.7. Change of Pharmacy Smartcard Unlocker
What does this process cover? Changing a pharmacy store’s smartcard sponsor.
How do I begin it? Complete and submit the Community Pharmacy Smartcard Form to the CSU IT Servicedesk
How long will it take? We aim to process unlocker change requests within 3 working days.
The NWCSU RA Team will contact the Pharmacy Smartcard Sponsor or Organisational Sponsor for approval before processing the request. This may delay the process depending upon their availability.
To unlock smartcards you may need to get your IT supplier to configure your computer desktop. Please request the technical instructions via the servicedesk if necessary.
5. Smartcard Access Levels
Levels of smartcard access are managed using Position Based Access Control (PBAC). A predefined set of access positions is set up for each pharmacy site, and users are assigned to the most appropriate position.
Position Name
Description
1
Pharmacist Access Position
Apply to:
Qualified pharmacists with current GPhC registration
Includes:
· Process authorised prescriptions and dispense medicines
· Return prescription
· Reimbursement claims
· View medication
· Set nominated pharmacy
· Confirm that an order is safe to supply or administer
2
Pharmacy Manager Access Position (Sponsor)
Apply to:
Qualified pharmacists with current GPhC registration who also act as smartcard sponsor
Includes:
Same as pharmacist, but can also approve smartcard registrations and changes
3
Pre-Registration Pharmacist Access Position
Apply to:
Qualified pre-registration pharmacists
Includes:
Same as pharmacist
4
*Dispensing Access Position
Apply to:
Qualified Dispensers / Qualified Pharmacy Technicians / Staff working towards a dispensary qualification
Includes:
· Process authorised prescriptions and dispense medicines
· Return prescription
· Reimbursement claims
· View medication
· Set nominated pharmacy
5
Counter Assistant Access Position
Apply to:
Shop staff
Includes:
Set a patients nominated pharmacy
6
*Non-Pharmacist Sponsor Access Position
Apply to:
Area managers (large chains) and business managers who do not dispense.
Includes:
Approve smartcard registrations and changes, unlock smartcards
7
Dispensing and Unlocker Access Position
Apply to:
Dispensing staff who are also required to unlock smartcards.
Includes:
Same as Dispensing Access Position, and also includes the ability to unlock.
*Dispensers can only act as sponsor when they are also the store manager and this is part of their job title. In this case they will be granted positions 4 and 6.
Unlocking Rights – Sponsors (Positions 2 and 6) are automatically granted the right to unlock smartcards. Users on other access positions can be set up to unlock if appropriate (see 4.7 Unlocker Change Process)
6. Smartcard Systems
6.1. CIS (Care Identity Service)
What is CIS? CIS is a web based system for smartcard management which is accessed using an internet browser.
What is it used for? CIS is used for all aspects of smartcard management such as registrations, applying access and unlocking smartcards. In pharmacies it is used by the sponsor to approve requests for smartcard access, unlock smartcards and renew certificates
Who uses it in a pharmacy? Pharmacy Smartcard Unlockers, Sponsors
6.2. CIS Technical Support
Technical issues with either system are the responsibility of your IT supplier. Supporting documents:
· Local IT Configuration Quick Guide for CIS - http://www.cpcw.org.uk/wp-content/uploads/sites/19/2015/01/IT-Config-for-CIS-Quick-Guide.docx
· HSCIC Warranted Environment Specification - http://systems.hscic.gov.uk/spine/future/spinewes.pdf
Secondary USB smartcard readers for unlocking can be requested via the CSU IT Servicedesk.
7. CIS Guides
This section contains operational instructions for unlocking and renewing smartcards, and for approving requests in UIM.
7.1. Security Message
Smartcard Unlockers and Sponsors are reminded to act responsibly when carrying out the activities detailed in this section.
Key points to consider when unlocking a smartcard:
· Never Unlock a Smartcard when the user is not present
· Always check the photo on the smartcard is the likeness of the person presenting the card
· Always hand the smartcard directly back to the user
· NHS Care Records Service Smartcard Terms and Conditions
To view go to http://nww.hscic.gov.uk/rasmartcards/docs/ra01a.doc
· All actions on the system are auditable
Key points to consider when approving a UIM request:
· Only approve smartcard registrations for users who you know and are assured require smartcard access
· Ensure that all access position assignment approved is an accurate reflection of the users role and they are qualified to carry it out (see access levels in section 5 of this document)
7.2. How to Unlock a User’s Smartcard
To be completed by the Sponsor or Unlocker
NOTE: You will need a secondary USB smartcard reader to complete this process.
A. Sponsor / Unlocker inputs smartcard and passcode
B. Open NHS Spine Portal – https://portal.national.ncrs.nhs.uk
C. Select Launch Care Identity Services
D. Select the ‘Manage Smartcard’ tab
E. Place the user's card in the second card reader. (Do not remove your own card from the reader as this will log you out of CIS).
F. Check that the correct user is displayed from their Personal Details.
G. Select the device, and then click the ‘Service’ button.
H. Select ‘Unlock Smartcard’, and click ‘continue’
I. Ask the user to set their new passcode, and click confirm.
PASSCODE POLICY
Only the user of a card can choose and set their PASSCODE in person.
PASSCODE Security: This must remain secret to the USER and must NOT be known by RA STAFF, administrators or disclosed to anyone else!
The PASSCODE is a choice of between a minimum of four to eight ALPHA and / or NUMERIC characters - Obvious sequences (e.g. 1234; 9999; 111111; password) must be avoided.
J. You should now see a message to say the smartcard is successfully unlocked.
7.3. How to Re-Issue Smartcard Certificates
These instructions are for Pharmacy Unlockers when unlocking a user’s smartcard – please read the security message at the start of section 7.
To be completed by the Sponsor or Unlocker
NOTE: You will need a secondary USB smartcard reader to complete this process. And the Smartcard certificates must be within 90 days prior to the expiry date.
A. Sponsor / Agent / Smartcard Administrator inputs smartcard and passcode
B. Open NHS Spine Portal – https://portal.national.ncrs.nhs.uk
C. Select Launch Care Identity Services
D. Select the ‘Manage Smartcard’ tab
E. Place the user's card in the second card reader. (Do not remove your own card from the reader as this will log you out of CIS).
F. Check that the correct user is displayed from their Personal Details.
G. Select the device, and then click the ‘Service’ button.
H. Select ‘Renew Certificates’, and click ‘continue’.
NOTE: The ‘Renew Certificates’ button will only be available for the 90 days prior to certificate expiry.
I. Ask the applicant to input their passcode and click ‘Continue’
J. The system will generate the required certificate pair which will be shown by the rotating icon.
Once completed, select the desired menu option.
7.4. How to Approve a Smartcard Request in UIM
To be completed by the Sponsor
These instructions are for Pharmacy Sponsors when approving an RA request – please read the security message at the start of section 5.
When there is a request pending in CIS, the CSU RA Agent will email the sponsor to notify them and remind them of these instructions
a) Insert your smartcard and passcode
b) Open NHS Spine Portal - https://portal.national.ncrs.nhs.uk/
c) Launch Care Identity Service
d) Click ‘awaiting actions’
e) Click on request ID number
f) Check request and click ‘Approve Position Assignment’
7.5. Self-Renewing Your Smartcard Certificates that are About to Expire
Self-Renewing Your Smartcard Certificates that are About to Expire The self-renewal message displays the date the Smartcard will expire and initially appears 90 days before certificates on a Smartcard are about to expire.
Unless the Smartcard is renewed, subsequent expiry messages appear every time the Smartcard is used. Sponsors cannot renew a Smartcard once it has expired.
Note: After a Smartcard is issued or renewed by an RA Agent, it can only be self-renewed twice thereafter. Therefore, on the third occasion (six years’ time) the Smartcard must be renewed by an RA Agent.
1. Insert you Smartcard into the card reader.
2. The system will check the credentials of your Smartcard and then request you to enter your Passcode / PIN:
3. If you are not automatically logged into your profile and have more than one role,click the session role hyperlink you wish to use.
4. A message appears notifying that the Smartcard certificates will expire; example below:
5. If you are automatically launched into your CIS Smartcard profile go to step 9
6. If you are not automatically launched into your CIS Smartcard profile go to step 7
7. Double click the ‘NHS Portal’ Icon on your desktop, or navigate to the web address below in your internet explorer.
8. Once you are logged onto the ‘National Health Spine Portal’, click on the link [Launch Care Identity Service (Replaces UIM, Calendra and CMS)] to open the CIS Dashboard.
9. On the CIS Dashboard under [Quick Links], click on the [My Profile] Quick link:
10. On your profile screen, select [Smartcard Details]:
11. If the Smartcard has not been selected automatically, click the [radio tab] next to the appropriate Smartcard [Serial Number] and then click [Service]
12. The Renew Certificate [radio tab] should already be selected, click [Continue]
13. The User must complete the [Enter Passcode] field and click [Continue]
14. Please wait whilst the certificates on the Smartcard are renewed
15. Completion of each of the five renewal stages display a tick
16. Once the Smartcard has been renewed, you will be returned to your profile page with the following success message:
17. On your profile page scroll down to [Smartcard Details] to view your new Smartcard expiry date:
·
8. Identification Documents
Smartcard applications can only be completed if one of the following combinations of identification are produced:
A. Two forms of photographic identification AND one document confirming your address
OR
B. One form of photographic identification AND two documents confirming your address
*Documents must be dated within the last three months
**Documents must be dated within the last 12 months
All other documents must be in date and not expired.
If applicants are unable to produce the required identification documents they must inform the RA team prior to the registration appointment. For full details and alternative proof of identification please see appendix 1 of the NHS identity check standards - http://www.nhsemployers.org/~/media/Employers/Documents/SiteCollectionDocuments/Identity%20checks%2022%20July.pdf
9. NWCSU Contact Details
0844 800 9982
Call Us
ICT Contact Centre - [email protected]
Email Us
10. NWCSU Offices
All appointments must be arranged in advance with an RA Agent. The RA Team can accommodate most times between 9am-5pm Monday – Friday, but the offices are not manned by RA staff at all times. If you visit without an appointment there is a strong chance that an RA Agent will not be available to see you.
Locality
Address
Birkenhead (Wirral)
Ground Floor, Old Market, House Hamilton Street, Birkenhead, CH41 5AL
Chester
1829 Building, Countess of Chester Health Park, Liverpool Road, Chester, Cheshire, CH2 1HJ
Macclesfield
Ground Floor Clark House, Hulley Road Macclesfield, Cheshire, SK10 2LU
Warrington
1st Floor, Wilderspool Business Park, Greenhalls Avenue, Stockton Heath,. Warrington, WA4 6HL
Nantwich
Bevan House, Barony Court, Nantwich, Cheshire, CW5 5QU
Crewe
NWCSU doesn’t have offices in Crewe, but smartcard sessions are occasionally run at Eagle Bridge Health Centre
Appendix - Community Pharmacy Smartcard Form
Below is a copy of the form used for community pharmacy smartcard requests. The form is completed as a PDF and submitted electronically to [email protected].
You can download the full version from the LPC Website - www.cpcw.org.uk/lpc-resources/electronic-prescription-service-eps
Acceptable Photo ID
Current Passport
Current UK or EU Photo Driving Licence
Acceptable Address Confirmation
Recent utility bill (mobile phone bills are NOT permisible)*
National ID Card
Local authority tax bill valid for the current year **
Most recent mortgage statement **
Bank, building society, credit card or credit union statement or passbook (if address is visible) *
Confirmation from an electoral register *
Current local council rent card or tenancy agreement *
UK full or provisional photo-card driving licence (must include paper counterpart); or a full old-style paper driving licence (if not already presented as a personal ID document).
Most recent HM Revenue & Customs tax notification**
Working Smarter for Better Health
7
*Application Form Submitted to CMCSU
ICT Servicedesk
**Request Approved on UIM System
Applicant contacted to arrange registration
appointment
Registration Appointment
·ID Checked
·T&Cs Electronically Signed
·Passcode set and card issued
APPLICANT / SPONSOR
COMMUNITY PHARMACY
RA AGENT
CMCSU
RA AGENT AND APPLICANT
CMCSU OFFICES
SPONSOR
COMMUNITY PHARMACY
Request raised on CIS system to apply
required access position
RA AGENT
CMCSU
�
�
�
*Application Form Submitted to CMCSU ICT Servicedesk
**Request Approved on UIM System
Applicant contacted to arrange registration appointment
Registration AppointmentID CheckedT&Cs Electronically SignedPasscode set and card issued
Form submitted to CSU ICT Servicedesk
*Request Approved on CIS System
Request Raised on CIS System
APPLICANT / SPONSOR
COMMUNITY PHARMACY
RA AGENT
CMCSU
SPONSOR
COMMUNITY PHARMACY
�
�
�
Form submitted to CSU ICT Servicedesk
*Request Approved on CIS System
Request Raised on CIS System
APPLICANT / SPONSOR
COMMUNITY PHARMACY
RA AGENT
CMCSU
SPONSOR
COMMUNITY PHARMACY
Top Related